Senior IT Security Engineer

Simpro Group; Miami (FL); Hybrid; USD 130,000 - 190,000; Full time

Job summary

Simpro Group seeks a Senior IT Security Engineer to own and advance security, risk management, and compliance across enterprise systems. You will govern identity, access, vulnerability programs, and vendor risk with cross‑functional influence.

The role emphasizes audit readiness and resilience, operating with significant autonomy. You will partner with technical teams to enforce secure configurations, evaluate new platforms, and balance risk with business velocity in a fast‑paced SaaS

Qualifications

• Experience designing and managing enterprise security programs and risk registers.
• Technical expertise in IAM, network and cloud security, and vulnerability governance.
• Ability to assess third‑party vendor risk and secure data access across complex environments.
• Experience in incident response, playbooks, and tabletop exercises.
• Strong communication to explain risk trade-offs to non‑technical partners.

Responsibilities

• Owns enterprise security and compliance programs, aligning with frameworks and audits.
• Maintains risk register across physical, logical, and systems infrastructure.
• Defines identity architecture standards and access controls to reduce exposure.
• Oversees vulnerability management and remediation metrics and SLAs.
• Leads third‑party risk assessments before onboarding vendors and integrations.
• Shifts incident response playbooks and supports resilience reviews.

Skills

IAM

Network Security

Cloud Security

Vulnerability Governance

Incident Response

Vendor Risk

Security Governance

Policy Execution

Education

B.S. in Computer Science/IT/Cybersecurity

Job description

Job Context

The Senior IT Security Engineer is a senior individual contributor role responsible for owning and advancing the security, risk management, and compliance posture across internal systems and operational environments. This position defines security governance frameworks, oversees certification maintenance, and manages technical risk remediation across enterprise infrastructure. Operating with significant autonomy, the incumbent serves as an authoritative advisor on identity management, access controls, vulnerability governance, and vendor risk. Through technical authority and cross-functional influence, this role ensures internal operations maintain continuous alignment with industry security standards and organizational resilience objectives.

What You’ll Do

Owns the enterprise security and compliance program, driving continuous alignment with industry‑standard security frameworks, certifications, and audit disciplines. Establishes and maintains the organizational risk register across physical, logical, and systems infrastructure to prioritize risk mitigation and remediation strategies. Defines and enforces identity architecture standards, access management controls, and credentials governance to minimize operational exposure. Drives vulnerability management governance across technical environments by establishing severity SLAs, standardizing inspection metrics, and overseeing remediation adherence. Leads third‑party risk management initiatives by conducting security assessments of software vendors, integrations, and external technologies prior to onboarding. Oversees security questionnaire workflows and compliance reporting to deliver streamlined assurance for external stakeholders. Shapes incident response playbooks, conducts regular tabletop simulations, and acts as a primary technical advisor during security events and resilience reviews. Advises technical and operational teams on secure configuration, access modeling, secrets management, and policy execution. Evaluates emerging security platforms, governance technologies, and operational controls to continuously elevate enterprise resilience and audit readiness. Balances security risk considerations against business velocity to recommend practical controls and defensible risk‑acceptance thresholds. This job description is not an exhaustive list of duties and may be modified at the discretion of Simpro Group.

What You’ll Bring

Demonstrated experience designing, implementing, and managing enterprise security programs, risk registers, and compliance audit lifecycles. Technical expertise in identity and access management (IAM), network security controls, cloud infrastructure security, and vulnerability management governance. Proven ability to evaluate third‑party vendor risk and govern data access security across complex software environments. Practical experience in incident response coordination, playbook development, and conducting technical tabletop exercises. Exceptional communication and stakeholder management skills, with the ability to articulate technical risk and security trade‑offs to non‑technical partners. Demonstrated track record of setting technical direction, establishing standards, and influencing cross‑functional technical teams without direct formal authority. Strong analytical, problem‑solving, and decision‑making capabilities focused on practical risk reduction and operational enablement. Relevant degree in Computer Science, Information Technology, Cybersecurity, or an equivalent combination of senior professional experience and industry certifications.

Our Core Values

Our Core Values We Are One Team We Are Customer Centric We Are Growth Minded We Are Accountable We Celebrate Success.

Simpro, AroFlo, BigChange & ClockShark are equal opportunity employers with a best‑of‑class onboarding program and supportive team environments.

This means that we want everyone to feel welcome with us and to provide equal opportunities for everyone, regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex or sexual orientation, or any other non‑performance factor.

If you’d like to join a fun and progressive organization, where there are opportunities to develop your career.

Please note, no agencies will be accepted in the recruitment of this role.

Welcome to Simpro! Together with AroFlo, BigChange and ClockShark we are one team made up of many nationalities. We are customer‑centric, always putting our customers and teammates first. We take accountability, owning both our innovations and our mistakes. We’re growth‑minded, constantly learning and evolving. And most of all, we celebrate our successes together!

Simpro Group provides best‑in‑class SaaS field service management solutions to trade and field service businesses worldwide. The group comprises four industry‑leading companies, Simpro, AroFlo, BigChange and ClockShark, with offices across North America, Australia, New Zealand and the UK. Simpro, AroFlo & BigChange provide comprehensive field service management software for growth‑minded trade and field service businesses, while ClockShark specializes in time‑tracking and scheduling software solutions. Together, these companies seek to drive businesses forward with solutions that empower teams to work smarter, provide foundations for business scaling, and offer data‑driven insights to fuel decision‑making. Simpro Group serves over 22,000 businesses and over 400,000 users worldwide and has a global workforce of more than 600 employees.

Ready to transform your business? Explore our products at simprogroup.com, aroflo.com, bigchange.com and clockshark.com.

Simpro Group has been made aware of fraudulent recruitment activity where individuals are impersonating our company and hiring managers to deceive job applicants. These scammers are using a fraudulent website and email domain (simprogroupcareers.com) and may contact you with illegitimate job offers. Their goal is typically to steal your personal information for identity theft or to trick you into paying for fake application fees, background checks, or equipment. If you have been contacted by someone you suspect is not a legitimate Simpro Group recruiter, or if you have any doubts about a job posting, please do not respond. Do not provide any personal information or payment. We take this matter very seriously and have reported this fraudulent activity to the relevant global authorities. We are committed to ensuring a safe and transparent recruitment process for all candidates.